Gemma 4 31B IT vs Step 3.7 Flash

Gemma 4 31B IT 65

Model card 20, all seven items are there, with languages given as counts. Training data 10, a general description with a January 2025 cut-off. Last change 10, the files last changed on 20 July, 104 days before 1 November, and Google's reference code for Gemma 4 last changed in a way that runs this model on 6 July, both inside 180 days. Responsiveness 10, Google answered 14 of the last 40 discussions, none since 30 July. Version policy 10, earlier generations are kept in their own repositories with dated releases. File health 5, two template reports wait without a reply.

Step 3.7 Flash 39

Model card 14, Intended use, the architecture, the parameters, the context and the language (in the metadata) are on the card. Training data 0, Nothing on the card about the training data. Last change 10, the last commit, on 3 June 2026, fixed the modelling code, 160 days before this check and within 180. Responsiveness 0, none of the 11 most recent discussions that aren't pull requests (29 May to 24 June 2026) has a reply from a stepfun-ai member, counted on 10 November by author flags and dates with a script, text not read. Version policy 5, Step-3.5-Flash stays in its own repositories and 3.7 came out in new ones, with no dated note on the older cards that we read. File health 10, Config, template and card agree on the architecture and the context, and June commits fixed the modelling code. 14 + 0 + 10 + 0 + 5 + 10 = 39.

Gemma 4 31B IT 95

Memory 25, Google's own QAT Q4_0 GGUF is 17.7 GB, which with a fifth added comes to about 21 GB and fits a 24 GB card even with the vision projector. Runtimes 25, released code in llama.cpp, Ollama's library, vLLM, SGLang and Transformers fills the cap without LM Studio, which only Google's guides name. Builds 15, Google ships a 4-bit GGUF and a 4-bit compressed-tensors build, read as two of the kinds the checklist names. Terms 15, plain Apache 2.0 with nothing added. Download 10, no gate and no account. Hosted 5, Google's Gemini API serves it today.

Step 3.7 Flash 70

Memory 5, the smallest build at 4 bits is StepFun's IQ4_XS GGUF, 104.99 GB with the 3.97 GB projector, and 108.96 GB × 1.2 = 130.8 GB, over what the reference machine can give a model and within 256 GB. The IQ3 and Q3 builds are below 4 bits and aren't read. Runtimes 20, Released vLLM 0.33.0, SGLang 0.5.23 and Transformers 5.22.2 have the step3p7 model, and llama.cpp b12242 has the architecture, with StepFun's own GGUF. Four at 5 each, and the card documents all four. Builds 15, StepFun publishes GGUF at five quantised precisions, an FP8 build and an NVFP4 build. Terms 15, Apache 2.0 in the card's metadata and its licence section, an OSI licence with nothing added. Download 10, the Hub API reports gated false for all four repositories on 10 November 2026, so the files download with no account and nothing to accept. Hosted 5, StepFun's own API serves it, per the card and our StepFun API listing, and Featherless and DeepInfra are live for it on Hugging Face. 5 + 20 + 15 + 15 + 10 + 5 = 70.

Gemma 4 31B IT 70

File safety 25, safetensors only and no code from the repository runs to load it or build prompts. Provenance 15, the files come from the google organisation that gemma.ai links to, with a SHA-256 for every weight file and a git hash for every file. Safety evaluation 0, Google says violations were minimal but publishes no results. Agent guidance 10, the card says what its safety training covers and asks for content safeguards, and the tool guide says to validate calls, but there is no prompt-injection guidance. Licence risk 15, Apache 2.0 carries none of the deductions and its link works. Security programme 5, Google's company-wide security.txt and reward programme exist but nothing ties them to Gemma, and no public advisories were found.

Step 3.7 Flash 45

File safety 15, safetensors and GGUF only, no .bin, .pt or .pth files (25). Provenance 15, the files sit in the stepfun-ai organisation, which the card's StepFun platform and model page belong to (10). Safety evaluation 0, no safety results on the card. Agent guidance 0, the card has no limitations section and gives no guidance on prompt injection, instruction priority, refusals or safeguards. Licence risk 15, Apache 2.0 has no use policy, threshold or change clause. Security programme 0, no way to report a flaw on the card, and our StepFun API listing found no security.txt, bug bounty or disclosure policy. 15 + 15 + 0 + 0 + 15 + 0 = 45.